CLAIMS 

What is Claimed is: 

1. In a Montgomery multiplication algorithm, a method of computing an 
output xyR" 1 mod m from input integers m = (^.1 ... m^m^ x = (x^ ... x<\Xo) b , y = (y n -i ... 
5 yiyb)b, with 0 < x, y < m, R = b n with gcd(m, 6) = 1 , and m' = -m~ 1 mod b comprising the 
steps of: 

representing a value A in the Montgomery multiplication algorithm with a 
redundant notation; and 

performing carry-save addition within an iterative process of the 
10 Montgomery multiplication algorithm to compute a new value of A 

method of Claim 1 , further comprising executing the algorithm: 
S <- 0 and T <- 0 (where S = (s n s n ^ ... s^sok and T = (t n t n ^ ... 

For / from 0 to ), do the following: 
b1 . Ui <r~ (so + fo + x,yoJ m' mod jb 
b2. (S, T)<r-(S + T +Xiy + Uim)/b 
A^ <- S + T and A 2 <- S + 7- m 
if >A 2 > 0 then >A <- >A 2 else >A <- >A 1 
Return >4 

20 3. The method of Claim 2, wherein the value of b is two. 

4. The method of Claim 2, wherein step b2 of the algorithm further 
comprising selecting one of y+m, y, m, or 0 to be added to S and T. 

5. The method of Claim 1 , wherein said representing step further comprises 
replacing said value of A with two other values, wherein a sum of the other two values 

25 equals said value of A. 
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2. The 
a. 

b. 



c. 
d. 
e. 



6. The method of Claim 1, wherein said performing step further comprises 
performing said carry-save addition in parallel. 

7. The method of Claim 1, wherein said performing step further comprises 
executing said iterative process a plurality of times equal to a number of bits 

5 representing said value of x. 

8. A method of performing a Montgomery exponentiation of x e mod m 
wherein the notation Mont(x, y, m) denotes the Montgomery multiplication algorithm 
yxR" 1 mod m from input integers m = (m n ^ ... m^mo)^ x = (x^i ... xiXo)/>, y = (y n -i ... yiyo)t>, 
with 0 < x, y < m, R - b n with gcd(m, b) = 1 , and rri = -/tT 1 mod b comprising the steps 
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representing a value A in the Montgomery multiplication algorithm with a 
redundant notation; and 

performing carry-save addition within an iterative process of the 
Montgomery multiplication algorithm to compute a new value of A. 
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9. The method of Claim 8, wherein m has s bits, e has t+1 bits, and 0<x<m, 
and the Montgomery exponentiation is performed according to the algorithm: 
a. Compute R = b s 



b. 



Compute R*R mod m 

Compute z = Mont(x, R*R mod m, m) 

Compute B = R mod m 

For i from t to 0 do the following: 

e.1 B = Mont (B, B, m) 

e.2 If ei = 1 then B = Mont (B, z, m) 



c. 



f- 20 



d. 



e. 



f. 



B = Mont (B,1,m) 
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Return B. 
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10. The method of Claim 8, further comprising executing the algorithm for 
Mont (x, y, m): 

a. S <- 0 and T 0 (where S = (s n s n -i ... s-iSoJb and T = (t n t n -i ... 

UtoM 

b. For / from 0 to ), do the following: 
b1 . Uj <- (so + fo + Xjyo) m' mod b 
b2. (S, 7) <- (S + T + x } y + u/m) /() 

c. 4- S + Tand A 2 <r- S + 7- m 

d. If ^2 > 0 then /\ <- /\ 2 else A <- Ai 

e. Return A 

1 1 . The method of Claim 10, wherein the value of b is two. 

12. The method of Claim 10, wherein step b2 of the algorithm further 
comprising selecting one of y+m, y, m, or 0 to be added to S and T. 

13. The method of Claim 8, wherein said representing step further comprises 
replacing said value of A with two other values, wherein a sum of the other two values 
equals said value of A. 

14. The method of Claim 8, wherein said performing step further comprises 
performing said carry-save addition in parallel. 

15. The method of Claim 8, wherein said performing step further comprises 
executing said iterative process a plurality of times equal to a number of bits 
representing said value of x. 

16. The method of Claim 8, further comprising solving a plurality of 
Montgomery multiplication problems simultaneously. 
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17. The method of Claim 16, and further comprising controlling selection of 
values to be added to S and T corresponding to each said of said plurality of 
Montgomery multiplication problems. 

18. An apparatus for performing a Montgomery multiplication for an output of 
xyR" 1 mod m and an input of m = (m n _i ... m^m 0 )b, x = (x„-i ... x& 0 ) b , y = (y^ ... yiy 0 )t>, 
with 0 < x, y < m, R = b n with gcd(m, b) = 1 , and rri - -m" 1 mod b, comprising: 

a plurality of storage units, with each one of the plurality of storage units 
corresponding to a value of x, m, y, S and 7, where A = S + 7, wherein the 
corresponding storage unit for x can shift its value, and the corresponding 
storage units for S and Tcan be set to zero; 

an adder configured to add the k terms from Xi times y, the k terms from Ui 
times m, and S and T; and 

a carry look-ahead adder configured to add any one set of values from a 
group including S and T, and S shifted and T shifted. 

19. The apparatus of Claim 18, wherein for b greater than or equal to two, the 
adder further comprises a carry-save adder within an iterative process of the 
Montgomery multiplication algorithm to compute a new value of A. 

20. The apparatus of Claim 19, wherein said carry-save adder further 
comprises a Wallace tree, 

21 . The apparatus of Claim 1 8, wherein b is equal to two. 

22. The apparatus of Claim 21, wherein the adder further comprises a full 
adder configured to add input values of S, 7, and any one value from a group consisting 
of m, y, m+y, zero, and ~m to produce a sum value and a carry value. 
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23. The apparatus of Claim 18, wherein said plurality of storage units and said 
added are operatively coupled to execute the algorithm: 

a. S <r- 0 and T <r- 0 (where S = (s n s n ^ ... s^so) b and T = (t n t n ^ ... 

b. For / from 0 to ), do the following: 
b1 . Uj <- (s 0 + to + Xiyo) m' mod b 
b2. (S, 7)<-(S + T+ xy + i//n7;/i> 

24. The apparatus of Claim 23, wherein said carry look-ahead adder is 
adapted to execute the algorithm: 

c. A| «- S + Tandv4 2 ^- S + T-m 

d. lfA2>0thenA <^-A 2 elseA <~A 1 

25. The apparatus of Claim 23, wherein the storage units corresponding to 
said value of x, y, m, y+m, S, and T are further adapted to hold a plurality of 
Montgomery multiplication problems that are solved simultaneously, and further 
comprising means for controlling the selection of values to be added to S and T 
corresponding to each said of said plurality of Montgomery multiplication problems. 

26. The apparatus of Claim 25, wherein for each of said plurality of 
Montgomery multiply problems, the carry look-ahead adder is adapted to execute the 
algorithm: 

c. A 1 <-S + TandA 2 +- S + T-m 

d. lfA 2 >0, then A <-A 2 , else A +-Ap 
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